rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks
Repository Index
81,588 visible repositories in the index
121–144 of 189 · Most stars
Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
- bypass-antivirus
- antivirus-evasion
- antivirus
- attack
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
- rust
- security
- security-tools
Creates up to a thousand WiFi access points with custom SSIDs.
- ssid
- custom-ssids
- wifi
- esp8266
ThePhish: an automated phishing email analysis tool
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
The repository host gives no description.
A DNS rebinding attack framework.
- dns-rebinding
- dns
- vulnerability
- attack
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
An information security preparedness tool to do adversarial simulation.
- uber
- vagrant
- yaml
- celery
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
- wordlist
- password
- password-strength
- password-safety
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
- active-directory
- cloud-security
- defensive-validation
- fastapi
Detect deauthentication frames using an ESP8266
BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
- bitlocker
- password-cracker
- cuda
- cryptography
A framework for layer 2 attacks
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Automated Attack Simulation in the Cloud, complete with detection use cases.
🔒Unified API for password hashing algorithms
A front-end JavaScript toolkit for creating DNS rebinding attacks.
Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
- ps5
- ps5-homebrew
- ps5-jailbreak
- ps5-tools